Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
File: 00vPISevCy4KJGrkV0MEx653Fek.mft (raw, json)
Hash identifier: WsuT6J/6q2tO20UEQ5ZAIo+C4wuE27Ucq7OrLVG1ZPw=
Subject key identifier: 89:27:56:60:95:8C:BF:16:3C:F9:BA:0A:31:B2:FB:D6:FB:D8:4B:12
Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Certificate serial: 019A71B81118E7A9E390677558D7EB9620D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 07:01:19 +0000
Manifest this update: Tue 11 Nov 2025 07:01:19 +0000
Manifest next update: Wed 12 Nov 2025 07:01:19 +0000
Files and hashes: 1: 00vPISevCy4KJGrkV0MEx653Fek.crl (hash: 9OkRW+5JQE56Gy+fJNnim1dq8r0nulPlNi4SBjzl+Xg=)
2: SqjmPfaLrtBpjmBn0-LK2-XYK6E.roa (hash: oP41hXDxiX++ad4HH6tMbCxCouHbTfiMX6JPBOFqfjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:11:18:e7:a9:e3:90:67:75:58:d7:eb:96:20:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Validity
Not Before: Nov 11 07:01:19 2025 GMT
Not After : Nov 12 07:01:19 2025 GMT
Subject: CN=89275660958cbf163cf9ba0a31b2fbd6fbd84b12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c4:4f:20:7c:3b:e6:2f:df:92:17:6c:de:5c:
68:1d:3a:bf:29:63:fe:c5:d8:05:5e:af:7f:f7:78:
b1:aa:de:0d:e6:6b:82:4a:11:8b:59:fb:90:f5:38:
a3:e1:4c:a4:15:1c:d2:aa:83:11:3d:60:15:ca:09:
3b:33:fd:9a:1b:b6:ed:5c:2c:cf:1a:9e:4c:6b:9c:
27:59:8d:81:a1:dc:84:ba:42:5b:c9:bf:e0:f3:fd:
e4:f5:7a:dd:e2:99:09:da:6c:a7:0d:a8:01:d2:9c:
9a:05:79:8f:00:ce:06:ee:91:02:1b:7e:d5:89:2a:
e9:cc:77:b3:dc:f5:4c:d2:96:ce:f7:cc:ff:49:54:
fa:12:d9:75:3c:02:c4:58:c2:90:41:23:1a:40:10:
1e:b8:f3:b5:d1:ec:3f:47:10:af:00:af:a6:ba:a2:
c0:66:40:c3:cd:db:ae:04:5c:f7:52:62:09:18:2e:
93:7c:a2:55:9a:21:11:ad:c3:93:fe:43:e4:25:88:
6f:d3:76:af:f6:0d:9c:da:82:02:31:a3:af:66:c3:
0f:f3:96:54:c9:11:d9:04:b3:e1:f7:9f:52:e0:7c:
9b:de:44:77:36:5a:c3:61:c4:71:bb:77:a9:df:42:
f0:ec:50:0b:63:42:7f:c8:12:bf:50:6f:9b:a2:60:
fa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:27:56:60:95:8C:BF:16:3C:F9:BA:0A:31:B2:FB:D6:FB:D8:4B:12
X509v3 Authority Key Identifier:
keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:7a:7c:be:8a:af:99:fc:7b:0f:d3:d4:84:32:22:b7:c7:d4:
a5:91:65:7c:2a:f5:6a:f6:4e:f4:ef:42:55:35:25:de:1e:41:
0e:78:e4:58:70:7e:2d:63:86:ed:d4:e7:75:8b:73:73:62:7e:
fa:1e:21:61:5e:be:63:f3:84:c5:2b:33:23:9c:13:2a:1b:17:
dd:12:00:a6:98:bb:2b:46:39:aa:63:4e:51:55:04:35:7c:2f:
20:92:ac:97:62:68:27:8b:00:c0:c2:7c:8a:70:6c:4f:db:44:
7c:00:29:cd:65:93:32:12:7a:df:24:2e:84:35:b1:1c:e5:7d:
eb:d3:67:90:b5:49:2e:34:9b:a0:b8:80:32:ef:68:1b:1c:de:
ed:bb:fc:ee:26:33:79:91:7e:a3:c4:6d:58:68:1c:df:ca:91:
27:ea:3e:0a:83:26:29:54:05:a9:d3:2c:7e:85:cb:57:2b:3f:
17:83:67:22:12:04:4b:9b:2b:14:5e:36:1a:f3:fc:af:0a:d3:
aa:95:da:6a:47:72:ec:1b:0b:76:f9:63:56:9f:0c:b8:30:c6:
bf:ea:dd:8b:5d:0f:7c:86:2c:12:2c:ad:c7:78:0f:86:fe:17:
d5:b2:f5:a8:5d:e9:7b:57:d2:21:c8:2a:98:64:be:1d:f1:98:
fb:34:20:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:22:31 2025 by rpki-client